store[.]communityworkshopstore[.]com

The domain store.communityworkshopstore.com was observed as a brand‑impersonation infrastructure and is currently taken offline. Registration records show the domain was created on October 28, 2025 through the REGRU‑RU registrar. DNS resolution points to the IP address 172.67.166.199, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are amber.ns.cloudflare.com and lars.ns.cloudflare.com, both operated by Cloudflare. No TLS certificate was presented for the domain, indicating that HTTPS was not configured at the time of observation.

The only publicly visible artifact is the page title "Workshop::AWP | Watatsumi 海神," which does not directly reference the targeted brand but is recorded as the site’s title. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. The domain appears on a single security blocklist and was actively blocked by the PhishDestroy service. VirusTotal analysis recorded detections by 11 of 95 security vendors, providing independent confirmation of suspicious behavior.

The risk rating is elevated, and the infrastructure’s reliance on Cloudflare’s network suggests the operators leveraged a reputable CDN to obscure the origin of the malicious host. Because the site is offline, dynamic content cannot be examined, and the absence of an SSL certificate limits the ability to assess transport‑layer security. Defenders should continue to block the domain and its associated IP address, monitor for any re‑registration attempts, and consider adding the domain to internal allow‑list exclusions for web filtering solutions. Ongoing vigilance is advised to detect any future resurrection of the domain or deployment of similar brand‑impersonation campaigns using the same hosting provider.